SAML 2.0 identitetsudbyders metadata

Her er det metadata, som SimpleSAMLphp har genereret. Du kan sende det til dem du stoler i forbindelse med oprettelsen af en føderation.

Du kan få metadata-xml her:

https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metadata

I SAML 2.0 metadata xml-format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDaTCCAlGgAwIBAgIQJncgtT0tQEJBWF9DFYBSXzANBgkqhkiG9w0BAQsFADAkMSIwIAYDVQQDDBlSVi1Ub29sIFRlc3QgSW50ZXJtZWRpYXRlMB4XDTI2MTAwNzA5MzMxMVoXDTI3MDIwNDA5MzMxMVowFzEVMBMGA1UEAwwMcnYtdG9vbC1zYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpqLeDHpTYL63LbwH1BEbybZjfZ9B+J/MHk3DAHn+b52QVYTMreJdOJqG7TzkvUX0nPMqS5UXm/Bex9QKun157Ho13GcnlTdvxe8W4icII0vRkzFwqNYd5Dg4jpRR20xuAvYyJxJNExXZC3x40qw2AFUvNo1fymSwzkQOa234p6uyWnt4o1T11VPjbZoqsQq0pwFHvMLkq+vgg7hDCZOBBY/OmTbvrWa5gbsapzvMEo+Zg0EzeAM8F4SBFHbHUHVY8SwEvaQdo/GXIKoGTj7MzIkOj8/WdsgjH7qPsDaR9NSggcov2nVdhfYsw0JgMrvRlXnroWQqFMjUzZ/leCMoQIDAQABo4GjMIGgMAkGA1UdEwQCMAAwHQYDVR0OBBYEFCigKrbMQJ07pbWDTZJ7aIuvoecYMFIGA1UdIwRLMEmAFN0kSdQz8WG7vLB1KY10lFLe/mEwoR6kHDAaMRgwFgYDVQQDDA9SVi1Ub29sIFRlc3QgQ0GCEQDH0nYF8DSLSLIqfd64684bMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAQEAbJWXyAzC1AUTY7Ney1xdqEj8umeZTxfPyQTnjFDcVhlbkWECz3W7p3wOPCWf4Cm7tV/BtmqEC2VkeD+6YUamWCpdCsgEhs0ds5InWDwTclFoMaFqG5U7qYdWHfsiHVanLFjWYBYUVBBHa8Hia6r8dbiiwOx88FlJCPTI0nc2UeXrej1hQGNIQcI9jJ0qeqkkA2qEwjdW3NNMNnw315/6d5RIlFvrlOngqBAI6A19gl/CypdhERh+I0VmpRg2Rm+vrGzlZn7kKuy9j+OBycI3vQ8q1G+ZUTMqxkc+P9Ywp06Azh+16ztlVYXKUK5vws7GbJIVOHVLcQD7ReFcRDxy3w==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I SimpleSAMLphp flat-file format - brug dette hvis du også bruger SimpleSAMLphp i den anden ende;

$metadata['https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.staging.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Certifikater

Download X509 certifikaterne som PEM-indkodet filer.

idp.crt